Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e32382e302f32342d3234203d3e2037303239.roa
File:                     3136322e3231372e32382e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          uSzcx53CBqcGGiMLHMZ9ZGTkxG3Z3c3m3wCQMOcZEPI=
Subject key identifier:   1C:EC:C0:CC:CF:C1:8B:50:67:6D:79:03:F1:F5:A6:70:C5:2A:49:82
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       3A6D13B3F9AC260C972928BF21EA71EFF33BA18B
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e32382e302f32342d3234203d3e2037303239.roa
Signing time:             Thu 10 Oct 2024 06:49:01 +0000
ROA not before:           Thu 10 Oct 2024 06:44:01 +0000
ROA not after:            Thu 09 Oct 2025 06:49:01 +0000
asID:                     7029
IP address blocks:        162.217.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 12:36:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:6d:13:b3:f9:ac:26:0c:97:29:28:bf:21:ea:71:ef:f3:3b:a1:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Oct 10 06:44:01 2024 GMT
            Not After : Oct  9 06:49:01 2025 GMT
        Subject: CN=1CECC0CCCFC18B50676D7903F1F5A670C52A4982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f2:ba:26:b1:20:a1:3f:17:af:16:79:b2:52:
                    e7:f0:7d:93:0d:73:b4:fd:7a:a6:b1:17:9e:94:cf:
                    34:0f:57:51:57:66:e6:11:a0:8f:c6:1a:04:16:51:
                    fd:0e:22:72:93:cb:05:6d:40:98:c6:8c:b3:14:d0:
                    c4:d9:55:8b:c9:58:92:6c:a4:67:40:04:dd:c4:43:
                    67:58:1d:f2:67:4e:54:1f:45:ef:3a:0e:2d:c3:6d:
                    f5:6f:7d:25:7e:eb:79:7a:86:08:47:82:25:31:82:
                    4d:af:19:60:a2:f5:f7:0d:4f:93:b2:93:42:e4:6c:
                    04:e4:5e:bf:65:54:36:b7:b2:8b:4a:2a:c6:b8:e2:
                    a7:e1:3a:57:8d:02:66:a1:c3:f4:c1:89:12:10:08:
                    14:f7:a7:e2:33:91:34:40:43:ad:3e:f7:8b:6d:0c:
                    6a:1a:fa:91:f4:2b:ae:91:34:6d:90:ac:4c:f0:ed:
                    86:23:19:88:38:cf:d0:85:2f:05:76:9a:63:9c:f8:
                    22:db:47:04:9e:a2:20:cd:66:62:b8:fc:a9:4c:6d:
                    40:f5:d7:fd:21:bb:49:6d:cb:30:35:4c:9f:6a:7c:
                    09:49:e6:41:d0:13:b6:c3:82:52:17:37:cf:33:e6:
                    98:37:fc:29:ba:e5:59:36:0c:25:1f:a5:ca:5e:b6:
                    88:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:EC:C0:CC:CF:C1:8B:50:67:6D:79:03:F1:F5:A6:70:C5:2A:49:82
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e32382e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:e2:8d:cf:a3:85:8c:96:f0:76:d9:73:78:a5:70:08:6f:a7:
         8e:ea:1a:e2:66:e1:7d:d9:6b:10:07:e3:0d:77:31:0e:12:77:
         18:f6:e0:6c:47:56:e0:63:af:69:1c:19:4a:40:6f:25:d1:de:
         fd:a4:4b:dc:74:a0:2e:b4:45:28:c6:13:02:46:70:0d:db:bd:
         c1:70:04:f1:79:4c:d8:66:04:aa:98:5f:82:b4:cb:66:a1:77:
         dd:4e:e4:ee:75:06:6a:4a:36:3c:1c:37:13:c9:b5:72:99:62:
         22:de:a6:28:45:74:be:3c:0d:e9:54:f1:73:85:84:f0:86:aa:
         c4:12:6b:da:f7:a1:d0:16:9a:ed:ce:7a:da:44:b5:e1:4d:d8:
         32:86:ee:4a:9b:bb:b8:7c:f0:e6:3e:21:f4:43:36:be:df:a6:
         a4:25:a8:a0:4a:11:9f:16:65:5b:93:64:09:11:aa:fd:47:7d:
         ce:4a:fc:bd:f9:9e:c3:ae:b3:d9:42:c5:53:e0:cc:30:90:13:
         2a:21:e9:86:f3:9b:9a:e2:00:78:88:aa:22:83:3f:7f:3c:ff:
         d2:53:ef:a4:80:a1:1d:78:c2:bb:ba:4c:71:f0:7a:4a:c5:2e:
         b4:85:e5:30:8a:de:2e:a4:34:7f:01:07:9d:7f:27:8c:3f:4a:
         a1:b1:93:15
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUOm0Ts/msJgyXKSi/Iepx7/M7oYswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzUxZWVkOTlmZjQzOThhZTE0NmNmYTMzMTljNzY4YzBm
NzcwMGRiNzdmMzAxOTZmNmEwHhcNMjQxMDEwMDY0NDAxWhcNMjUxMDA5MDY0OTAx
WjAzMTEwLwYDVQQDEygxQ0VDQzBDQ0NGQzE4QjUwNjc2RDc5MDNGMUY1QTY3MEM1
MkE0OTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfK6JrEgoT8X
rxZ5slLn8H2TDXO0/XqmsReelM80D1dRV2bmEaCPxhoEFlH9DiJyk8sFbUCYxoyz
FNDE2VWLyViSbKRnQATdxENnWB3yZ05UH0XvOg4tw231b30lfut5eoYIR4IlMYJN
rxlgovX3DU+TspNC5GwE5F6/ZVQ2t7KLSirGuOKn4TpXjQJmocP0wYkSEAgU96fi
M5E0QEOtPveLbQxqGvqR9CuukTRtkKxM8O2GIxmIOM/QhS8FdppjnPgi20cEnqIg
zWZiuPypTG1A9df9IbtJbcswNUyfanwJSeZB0BO2w4JSFzfPM+aYN/wpuuVZNgwl
H6XKXraI8wIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFBzswMzPwYtQZ215A/H1pnDF
KkmCMB8GA1UdIwQYMBaAFBCHDkwR2cquEGW/+yrg2c9FXBzbMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOGJhYTU3OWMwMThiYjJjMWIxOWUwYzVlLzAv
MTA4NzBFNEMxMUQ5Q0FBRTEwNjVCRkZCMkFFMEQ5Q0Y0NTVDMUNEQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3L2Q3MDU4YjI2LWQ3N2MtNDAwNS04Y2I4LWY1ODc2ZDRjMGQxNS8zNTFl
ZWQ5OWZmNDM5OGFlMTQ2Y2ZhMzMxOWM3NjhjMGY3NzAwZGI3N2YzMDE5NmY2YS5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZThiYWE1NzljMDE4YmIy
YzFiMTllMGM1ZS8wLzMxMzYzMjJlMzIzMTM3MmUzMjM4MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzczMDMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACi2RwwDQYJKoZIhvcNAQELBQAD
ggEBAAXijc+jhYyW8HbZc3ilcAhvp47qGuJm4X3ZaxAH4w13MQ4Sdxj24GxHVuBj
r2kcGUpAbyXR3v2kS9x0oC60RSjGEwJGcA3bvcFwBPF5TNhmBKqYX4K0y2ahd91O
5O51BmpKNjwcNxPJtXKZYiLepihFdL48DelU8XOFhPCGqsQSa9r3odAWmu3OetpE
teFN2DKG7kqbu7h88OY+IfRDNr7fpqQlqKBKEZ8WZVuTZAkRqv1Hfc5K/L35nsOu
s9lCxVPgzDCQEyoh6Ybzm5riAHiIqiKDP388/9JT76SAoR14wru6THHwekrFLrSF
5TCK3i6kNH8BB51/J4w/SqGxkxU=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:39 2025 by rpki-client